This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json) Hash identifier: wjAJ0OfsbYanVSZahR14iyQknGhVmhKJEdT4gdhUd/I= Subject key identifier: 53:66:ED:5E:08:83:97:A1:44:24:4F:4E:1B:9A:EF:52:1A:BE:6F:97 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B5004AF7B1B7A7C71E6E9C44B2A4EA8AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 11:00:42 +0000 Manifest this update: Wed 24 Dec 2025 11:00:42 +0000 Manifest next update: Thu 25 Dec 2025 11:00:42 +0000 Files and hashes: 1: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (hash: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U=) 2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=) 3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: cJNQSbIZ52OZ5Z577RpARste8mJdv0B+8TzcnBE+QaI=) 4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=) 5: escRk3d2NjI3vOhsunfMskewVFU.roa (hash: zPSViHW+zBVRTJi3BUxGbJ65sQUAitf2bEnfu5wf6oI=) 6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=) 7: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:af:7b:1b:7a:7c:71:e6:e9:c4:4b:2a:4e:a8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 24 11:00:42 2025 GMT Not After : Dec 25 11:00:42 2025 GMT Subject: CN=5366ed5e088397a144244f4e1b9aef521abe6f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:63:df:23:00:08:b3:0d:ee:0f:b2:61:36: 27:42:fa:0b:54:00:62:4d:f4:8d:5a:b0:0c:29:08: fe:68:ea:85:f2:7e:4a:d1:67:89:ae:bd:78:1c:5d: dc:79:69:0c:a6:67:04:b8:56:9e:b7:1f:d0:c6:e3: 7a:6a:f9:7d:ab:15:57:09:2c:19:6c:0b:ab:b1:b0: 91:80:0b:05:7c:ba:89:f6:90:35:a8:a2:a7:fc:e2: 5b:11:cf:37:b9:c1:a2:f3:55:c2:89:51:4f:65:46: 92:04:b7:4b:86:f8:c1:2f:46:2c:30:7f:df:3e:56: 38:15:2f:7b:5d:ce:40:1e:e8:5b:05:cb:55:30:04: ab:48:5f:73:14:e9:f5:29:f8:4d:64:8d:bd:ad:67: 19:11:1f:2b:ac:f1:2f:30:ab:5f:b2:75:64:a4:06: 60:a2:6f:69:fa:9d:3c:0f:3d:4c:b6:3c:75:fd:7e: d3:3d:b3:73:83:cb:c4:0c:92:f6:32:cc:8b:18:6a: fe:47:1e:02:a3:ca:a2:ea:9f:44:79:c6:7b:74:8c: 2b:c8:a8:95:85:61:31:07:de:a2:bf:db:5a:dc:09: 21:e6:aa:cb:53:ff:83:6e:26:8c:dc:a6:3c:33:21: d4:95:95:8d:2d:ed:51:19:b6:93:35:58:5c:5f:2d: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:ED:5E:08:83:97:A1:44:24:4F:4E:1B:9A:EF:52:1A:BE:6F:97 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4c:c8:2c:bd:e3:88:83:ec:14:61:18:be:c9:af:2a:6e:a2: 9c:cb:c1:ed:4d:0f:1f:6b:9b:75:70:a3:69:ab:6d:32:ee:cc: ae:6a:31:1e:0d:30:82:a1:3a:1c:84:30:c1:17:02:d5:b2:de: df:72:ae:7e:a1:b4:79:5c:5a:ca:82:0f:30:49:8a:5d:1e:15: 59:3a:8e:23:ca:4b:f7:4e:a2:e7:0a:b2:8a:67:ae:ea:dd:0d: 08:6b:dd:95:87:15:48:ff:e2:61:b1:4f:de:72:d2:a3:93:fe: e8:7d:ff:58:59:9c:eb:d1:c5:de:68:6a:49:eb:00:b0:c5:f9: 30:08:7a:cb:ef:90:d4:e6:55:4f:fd:38:4c:2d:db:5f:3a:ee: 8d:4d:27:49:6f:f1:ed:01:bc:df:4c:3e:9b:56:ea:a0:13:cd: b6:6c:86:2f:a7:00:dd:29:00:7a:81:53:fa:30:c2:cc:03:86: 85:21:f3:ca:b8:ed:44:68:26:e0:7d:8e:c0:ae:77:93:28:7a: d6:36:fc:79:2d:ae:f8:c1:af:dc:9a:d7:a3:2e:fd:53:53:64: cb:9d:4d:09:e5:c6:58:43:f0:21:b5:20:72:51:70:c4:b0:4f: ea:cc:93:f7:09:c8:a7:ab:4e:68:dd:5f:ba:69:3d:fd:3c:51: c1:78:06:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBK97G3p8cebpxEsqTqiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjI0MTEwMDQyWhcNMjUxMjI1MTEwMDQyWjAzMTEwLwYDVQQD Eyg1MzY2ZWQ1ZTA4ODM5N2ExNDQyNDRmNGUxYjlhZWY1MjFhYmU2Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA221j3yMACLMN7g+yYTYnQvoLVABi TfSNWrAMKQj+aOqF8n5K0WeJrr14HF3ceWkMpmcEuFaetx/QxuN6avl9qxVXCSwZ bAursbCRgAsFfLqJ9pA1qKKn/OJbEc83ucGi81XCiVFPZUaSBLdLhvjBL0YsMH/f PlY4FS97Xc5AHuhbBctVMASrSF9zFOn1KfhNZI29rWcZER8rrPEvMKtfsnVkpAZg om9p+p08Dz1Mtjx1/X7TPbNzg8vEDJL2MsyLGGr+Rx4Co8qi6p9EecZ7dIwryKiV hWExB96iv9ta3Akh5qrLU/+DbiaM3KY8MyHUlZWNLe1RGbaTNVhcXy2sfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNm7V4Ig5ehRCRPThua71Iavm+XMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUzILL3j iIPsFGEYvsmvKm6inMvB7U0PH2ubdXCjaattMu7MrmoxHg0wgqE6HIQwwRcC1bLe 33KufqG0eVxayoIPMEmKXR4VWTqOI8pL906i5wqyimeu6t0NCGvdlYcVSP/iYbFP 3nLSo5P+6H3/WFmc69HF3mhqSesAsMX5MAh6y++Q1OZVT/04TC3bXzrujU0nSW/x 7QG830w+m1bqoBPNtmyGL6cA3SkAeoFT+jDCzAOGhSHzyrjtRGgm4H2OwK53kyh6 1jb8eS2u+MGv3JrXoy79U1Nky51NCeXGWEPwIbUgclFwxLBP6syT9wnIp6tOaN1f umk9/TxRwXgGqQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:28 2025 by rpki-client